These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
Cybercriminals are able to execute social engineering attacks by accessing readily available information online. They can research a business, employees and executives. The criminal will even use an actual event picked from social media – for instance, a financial director who is just returned to work from a holiday – to sound more legitimate.
This emerging security threat is also made possible by the development of video editing software that can swap faces and alter facial expressions. Such developments have enabled deepfakes to fool biometric checks (like facial recognition) to verify user identities.
The deepfake cybersecurity threat has become such a concern that the Federal Bureau of Investigation (FBI) has issued a Private Industry Notification (PIN) cautioning companies of the possible use of fake content in a newly defined cyberattack vector referred to as Business Identity Compromise (BIC).
How to be Prepared and Protect Against Deepfakes
Deepfake videos and images can be recognized by checking for unnatural body shape, lack of blinking in videos, unnatural facial expressions, abnormal skin color, bad lip-syncing, odd lighting, awkward head and body positioning, etc. However, cybercriminals keep evolving and creating more convincing deepfakes.
Other measures introduced to combat deepfakes include creating solutions that detect deepfakes. There also was an introduction of deepfake legislation in the National Defense Authorization Act (NDAA) in December 2019.
Unfortunately, this has not been enough, and enterprises have the task of helping reduce the impact of these attacks. The following measures can help:
Use anti-fake technologies Businesses should explore automated technologies that help identify deepfake attacks. They should also consider watermarking images and videos.
Enforce robust security protocols Implement security protocols to help avoid deepfakes, such as automatic checks for any procedure involving payments. For instance, putting systems that allow verification through other mediums.
Develop new security standards As security threats keep evolving, so should security standards within a company. For instance, introduce new security standards involving phone and video calls.
Training and awareness Enterprises should enforce regular training and raise awareness among employees, management, and shareholders on the dangers of deepfakes to businesses. When all involved parties are trained to identify deepfake social engineering efforts, this will help reduce the chances of falling victim.
Keep user data private Deepfake attackers use the information found in public domains such as social media. Although not a failsafe procedure, company profiles can be made private. Users also should avoid adding or connecting with strangers they don’t know and posting too much personal information online.
Disinformation response policy Some deepfake incidents are out of control for an enterprise, such as fake videos purporting to be from top management. However, establishing a disinformation response plan will help in cases of a reputation crisis. This should include monitoring and curating all multimedia output – which will help present original content to the public as authentic content.
Conclusion
Deepfake is an emerging cybersecurity concern that requires enterprises to be aware of its potential threats and stay prepared. Although it might be possible to identify a poorly generated deepfake with the naked eye, the technology continues to advance. In response, countermeasures must keep pace.
Powell CPA PLLC
Increase In Deepfake Attacks and How Enterprises Can Prepare
October 1, 2022 · Blog, What's New in Technology
⏱ 4 min read
Deepfake technology utilizes machine learning and artificial intelligence (AI) to manipulate or create synthetic audio, video and images that appear authentic. Deepfakes are commonly featured in entertainment and politics to spread false information and propaganda. For instance, deepfake has been used to show a celebrity or leader saying something that they didn’t, and this creates fake news.
Unfortunately, in deepfakes, cybercriminals have found a new tool for cyberattacks. Cybercriminals are now using deepfakes to pose a variety of enterprise risks.
How Cybercriminals Are Using Deepfakes
Deepfake technology is now used to create scams, hoaxes and false claims that undermine and destabilize organizations. For instance, a manipulated video might show a senior executive associated with fake news, such as admitting to a financial crime or spreading misinformation about a company’s products. Such corporate sabotage costs a lot of time and money to disprove and can impact a business’s reputation.
Another way businesses can be negatively impacted is through social engineering attacks such as phishing, which relies on impersonation to compromise an email. Similarly, social engineering using deepfakes can feature voice or video impersonations. A good example of such an impersonation was reported in The Wall Street Journal, in which fraudsters used AI to mimic a CEO’s voice. This incident happened in March 2019, when criminals impersonated a chief executive’s voice to direct a payment of $243,000.
Cybercriminals are able to execute social engineering attacks by accessing readily available information online. They can research a business, employees and executives. The criminal will even use an actual event picked from social media – for instance, a financial director who is just returned to work from a holiday – to sound more legitimate.
This emerging security threat is also made possible by the development of video editing software that can swap faces and alter facial expressions. Such developments have enabled deepfakes to fool biometric checks (like facial recognition) to verify user identities.
The deepfake cybersecurity threat has become such a concern that the Federal Bureau of Investigation (FBI) has issued a Private Industry Notification (PIN) cautioning companies of the possible use of fake content in a newly defined cyberattack vector referred to as Business Identity Compromise (BIC).
How to be Prepared and Protect Against Deepfakes
Deepfake videos and images can be recognized by checking for unnatural body shape, lack of blinking in videos, unnatural facial expressions, abnormal skin color, bad lip-syncing, odd lighting, awkward head and body positioning, etc. However, cybercriminals keep evolving and creating more convincing deepfakes.
Other measures introduced to combat deepfakes include creating solutions that detect deepfakes. There also was an introduction of deepfake legislation in the National Defense Authorization Act (NDAA) in December 2019.
Unfortunately, this has not been enough, and enterprises have the task of helping reduce the impact of these attacks. The following measures can help:
Use anti-fake technologies Businesses should explore automated technologies that help identify deepfake attacks. They should also consider watermarking images and videos.
Enforce robust security protocols Implement security protocols to help avoid deepfakes, such as automatic checks for any procedure involving payments. For instance, putting systems that allow verification through other mediums.
Develop new security standards As security threats keep evolving, so should security standards within a company. For instance, introduce new security standards involving phone and video calls.
Training and awareness Enterprises should enforce regular training and raise awareness among employees, management, and shareholders on the dangers of deepfakes to businesses. When all involved parties are trained to identify deepfake social engineering efforts, this will help reduce the chances of falling victim.
Keep user data private Deepfake attackers use the information found in public domains such as social media. Although not a failsafe procedure, company profiles can be made private. Users also should avoid adding or connecting with strangers they don’t know and posting too much personal information online.
Disinformation response policy Some deepfake incidents are out of control for an enterprise, such as fake videos purporting to be from top management. However, establishing a disinformation response plan will help in cases of a reputation crisis. This should include monitoring and curating all multimedia output – which will help present original content to the public as authentic content.
Conclusion
Deepfake is an emerging cybersecurity concern that requires enterprises to be aware of its potential threats and stay prepared. Although it might be possible to identify a poorly generated deepfake with the naked eye, the technology continues to advance. In response, countermeasures must keep pace.
Disclaimer
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
Per the SEC, a statement of cash flow features three sections that detail sources and utilization of the business’ operating, financing and investing cash flows. It paints a picture of inflows and outflows of the business’s cash levels. At the end of the day, it helps anyone interested in the company’s financials, especially potential and current investors, see the latest status and trends of cash flow.
One way to calculate cash flow, according to the SEC, is to look at a company’s free cash flow (FCF). This is calculated as follows:
Free Cash Flow = Operating Cash Flow – Capital Expenditures
Free Cash Flow = $50 million – $20 million = $30 million
This information is helpful because free cash flow can help determine a company’s financial health, how well (or not) the business model is performing, and its overall likelihood of success moving forward. Additionally, understanding the difference in accounting methods is another helpful piece of financial accounting analysis.
Accrual Method vs. Cash Method
Accrual Method
When it comes to the accrual method, according to the Congressional Research Service, when a business is paid for services or products to be rendered in the future, the payment is permitted to be recognized as revenue only when the product or service has been rendered. When it comes to accounting for expenses that are presumably deductible, under the accrual method, the expense can be recorded when it’s experienced by the business, not when payment has been made to the utility, raw material supplier, etc.
Cash Method
If a consultant gets payment immediately but isn’t expected to do said job until the following month, this approach requires revenue to be recognized when the cash has been received. Similarly, when expenses are paid is when expenses are recorded.
Considerations
For any business that handles inventory or sells to customers on credit, accrual accounting is required by the Internal Revenue Service. Similarly, for companies with average gross receipts of revenues greater than $25 million for the past 36 months, the IRS mandates accrual accounting. For companies with average gross receipt of revenues of less than $25 million, depending on the exact circumstances of the company’s business nature, cash or accrual may be used.
Financial accounting provides investors, business owners, and those providing businesses with legal and accountability a way to monitor performance and compliance.
Financial accounting is how accounting professionals document, compile and outline how a business performs financially over a discrete period of time. Unlike cost accounting, which is used primarily for internal short and long-term strategic planning, financial accounting focuses primarily on producing relevant documentation for outside parties interested in short- and long-term financial performance.
Small businesses, large corporations and nonprofits use the following financial statements produced for relevant parties: the Balance Sheet, the Cash Flow Statement and the Income Statement. When it comes to publicly traded companies, their financial accounting standards are overseen by generally accepted accounting principles (GAAP). It’s one way to provide a standardized means to communicate the business’s monetary details to potential and current shareholders, lenders, government oversight and tax enforcement agencies.
Balance Sheet
As the U.S. Securities and Exchange Commission (SEC) explains, the balance sheet is a financial statement that informs readers about a business’s assets, financial obligations and shareholders’ equity. It’s how a business documents its asset valuation, its financial obligations and cash holdings. It provides owners, lending institutions and investors a way to analyze a business. The current ratio shows the ratio of current assets to current liabilities. This is a way to evaluate a business’ ability to manage financial obligations over the next year. Shareholders’ equity represents how much cash would remain if the business satisfied all creditors and all assets were liquidated; whatever remains would be the property of the shareholders.
Income Statement
Released once a month, every quarter or once per year, an income statement reports revenue, expenses, and net earnings or losses of a company for a given period. A company’s net revenue is calculated by subtracting allowances for uncollectable accounts, discounts, etc. from a business’s gross sales or revenues. From there, subtract the cost of sales, or how much the lot of products or services cost to make for the accounting period, from the net revenues figure. This results in gross profit or gross margin. Depreciation, along with amortization, or the cost of machinery and equipment losing life over time, is subtracted from the gross profit figure.
From there, operating expenses, which aren’t directly attributable to product or service production but are running day-to-day operations, are deducted from the resulting gross profit figure. This number is now called income from operations or operating profit before interest and income expense. Depending on the number, the interest income or interest expense is either added or subtracted from operating profits to arrive at the operating profit before income tax. Finally, income tax is deducted, resulting in net profit (net income or net earnings) or net losses. For publicly traded companies, it gives investors insight as to how much the company is making per share, so-called “earnings per share” (EPS).
Statement of Cash Flow
Per the SEC, a statement of cash flow features three sections that detail sources and utilization of the business’ operating, financing and investing cash flows. It paints a picture of inflows and outflows of the business’s cash levels. At the end of the day, it helps anyone interested in the company’s financials, especially potential and current investors, see the latest status and trends of cash flow.
One way to calculate cash flow, according to the SEC, is to look at a company’s free cash flow (FCF). This is calculated as follows:
Free Cash Flow = Operating Cash Flow – Capital Expenditures
Free Cash Flow = $50 million – $20 million = $30 million
This information is helpful because free cash flow can help determine a company’s financial health, how well (or not) the business model is performing, and its overall likelihood of success moving forward. Additionally, understanding the difference in accounting methods is another helpful piece of financial accounting analysis.
Accrual Method vs. Cash Method
Accrual Method
When it comes to the accrual method, according to the Congressional Research Service, when a business is paid for services or products to be rendered in the future, the payment is permitted to be recognized as revenue only when the product or service has been rendered. When it comes to accounting for expenses that are presumably deductible, under the accrual method, the expense can be recorded when it’s experienced by the business, not when payment has been made to the utility, raw material supplier, etc.
Cash Method
If a consultant gets payment immediately but isn’t expected to do said job until the following month, this approach requires revenue to be recognized when the cash has been received. Similarly, when expenses are paid is when expenses are recorded.
Considerations
For any business that handles inventory or sells to customers on credit, accrual accounting is required by the Internal Revenue Service. Similarly, for companies with average gross receipts of revenues greater than $25 million for the past 36 months, the IRS mandates accrual accounting. For companies with average gross receipt of revenues of less than $25 million, depending on the exact circumstances of the company’s business nature, cash or accrual may be used.
Financial accounting provides investors, business owners, and those providing businesses with legal and accountability a way to monitor performance and compliance.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.